responder

Documentation

Overview

Implementation of an OCSP responder defined by RFC 6960

Index

• Constants
• type IndexEntry
• type OCSPResponder
  • func Responder() *OCSPResponder
  • func (self *OCSPResponder) Serve() error

Constants

const (
	StatusValid   = 'V'
	StatusRevoked = 'R'
	StatusExpired = 'E'
)

I only know of two types, but more can be added later

Types

type IndexEntry

type IndexEntry struct {
	Status byte
	Serial *big.Int // wow I totally called it
	// revocation reason may need to be added
	IssueTime         time.Time
	RevocationTime    time.Time
	DistinguishedName string
}

type OCSPResponder

type OCSPResponder struct {
	IndexFile    string
	RespKeyFile  string
	RespCertFile string
	CaCertFile   string
	LogFile      string
	LogToStdout  bool
	Strict       bool
	Port         int
	Address      string
	Ssl          bool
	IndexEntries []IndexEntry
	IndexModTime time.Time
	CaCert       *x509.Certificate
	RespCert     *x509.Certificate
	NonceList    [][]byte
}

func Responder

func Responder() *OCSPResponder

I decided on these defaults based on what I was using

func (*OCSPResponder) Serve

func (self *OCSPResponder) Serve() error

setup an ocsp server instance with configured values